Ian Dunn: Stored XSS in SupportFlow Ticket Subject

SupportFlow contains an XSS vulnerability in how it handles ticket subjects in the admin-side ticket form, because the subject is not escaped before being used in the value attribute of the subject input element. This first requires wptexturize to be disabled not that uncommon: addfilter...